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ABSTRACT 

Methods  of  proving  that  a  term- rewriting  system  terminates 
are  presented.   They  are  based  on  the  notion  of  "simplification  orderings", 
orderings  in  which  any  term  that  is  homeomorphically  embeddable  in  another 
is  smaller  than  the  other.   Most  of  the  well-founded  orderings  that  have 
been  used  for  proving  termination  are  indeed  simplication  orderings.   A 
particularly  useful  class  of  simplification  orderings,  the  "recursive  path 
orderings",  is  defined.   Several  examples  of  the  use  of  such  orderings 
in  termination  proofs  are  given. 


I.   INTRODUCTION 

It  is  sometimes  convenient  to  express  programs  in  the  form  of 

term-rewriting  systems.   Such  programs  are  easy  to  understand  and  have  a 

simple,  elegant  syntax  and  semantics.   For  example,  the  following  system 

of  five  rewrite  rules  transforms  logical  formulae  [containing  the 

operators  V  (disjunction) >  A  (conjunction),  and  i   (negation)]  into  an 

equivalent  formula  in  disjunctive  normal  form: 

-i-ia  ■>  a 

-i(aVB)  ■*  (naA-,8) 
-i(aAB)  ->  (iaV-,3) 
aA(0Vy)  +   (aA3)V(aAy) 
(gVy)Aa  ->  (BAa)V(yAa) 

The  first  rule  indicates  that  double  negations  may  be  eliminated;  the 
second  and  third  rules  apply  DeMorgan's  laws  to  push  negations  inward; 
the  last  two  rules  apply  the  distributivity  of  conjunction  over 
disjunction.   Such  systems  are  becoming  increasingly  popular  in 
automated  simplification  and  theorem-proving  applications;  some  examples 
are  Itturiaga  [1967],  Griesmer  and  Jenks  [1971],  Hearn  [1971],  Ballantyne 
and  Bledsoe  [1977],  Boyer  and  Moore  [1977],  Carter,  et  al.  [1977], 
Weyrauch  [1977],  and  Musser  [1978]. 

The  above  program  is  executed  for  a  given  input  term  by 
repeatedly  replacing  subterms  of  the  form  of  the  left-hand  side  of  some 
rule  with  the  corresponding  right-hand  side,  until  no  further  rewrites 
are  possible.   Thus,  the  second  rule  in  the  above  system  may  be  applied 
to  the  input  term  aA-n(bVc)  by  replacing  -i(bVc)  with  (-ibA-ic)  ,  thereby 


(A) 


obtaining  aA-i(-ibA-ic)  .   The  computation  iterates  in  this  manner,  at  each 
stage  choosing  some  applicable  rule  and  applying  it  to  some  subterm. 
Continuing  with  our  example:   By  applying  the  third  rule,  we  get  aA(-i-ibV-i-ic) 
Two  applications  of  the  first  rule  then  yield  aA(bVc).   Finally,  an 
application  of  the  fourth  rule  gives  (aAb)V(aAc)  which  is  in  disjunctive 
normal  form.   At  this  point,  no  rule  is  applicable  and  the  system  is  said 
to  have  "terminated"  with  the  final  result  (aAb)V(aAc). 

To  verify  the  correctness  of  such  a  program,  one  must  show 
1)  that  it  always  terminates,  i.e.  given  any  input  term,  execution  will 
always  reach  a  stage  for  which  there  is  no  way  to  continue  applying  rules, 
and  2)  that  it  is  "partially  correct",  in  the  sense  that  if  it  does 
terminate,  then  the  final  result  is  what  was  desired.   In  this  paper, 
we  deal  only  with  the  termination  aspect  of  correctness. 

The  difficulty  in  proving  the  termination  of  a  system  such  as 
the  one  for  disjunctive  normal  form  above  stems  from  the  fact  that  while 
some  rules  may  decrease  the  size  of  a  term,  other  rules  may  increase  its 
size  and  duplicate  occurrences  of  subterms.   Furthermore,  applying  a  rule 
to  a  subterm  not  only  affects  the  structure  of  that  subterm,  but  also 
changes  the  structure  of  its  superterms.   Any  proof  of  termination  must 
take  into  consideration  the  many  different  possible  rewrite  sequences 
generated  by  the  nondeterministic  choice  of  rules  and  subexpressions. 
Various  methods  for  proving  termination  of  term-rewriting  systems  have 
been  suggested  in  recent  years,  including  Iturriaga  [1967],  Knuth  and 
Bendix  [1969],  Manna  and  Ness  [1970],  Lankford  [1975],  Lipton  and 
Snyder  [1977],  Plaisted  [July  1978],  Plaisted  [Sept.  1978],  and 
Dershowitz  and  Manna  [1979].   In  this  paper  we  present  new  methods  of 


proving  termination.   One  can  show  (Huet  and  Lankford  [1978])  that 
termination  is  in  general  an  undecidable  property  of  such  systems. 

The  partial  correctness  of  term-rewriting  systems,  on  the 
other  hand,  is  often  easy  to  verify.   One  usually  shows  that  each  rule 
is  "value-preserving",  i.e.  if  Jl  -*■  r  is  a  rule  in  the  system,  then  £  =  r 
in  the  intended  interpretations.   (In  the  above  example,  each  rule 
preserves  logical  equivalence.)   Furthermore,  one  must  verify  that  all 
possible  final  results  have  the  desired  properties,  for  example  by  showing 
that  were  a  final  result  not  of  the  desired  form,  then  some  rule  could 
still  be  applied  to  it.   (By  the  definition  of  disjunctive  normal  form,  no 
compound  formula  may  be  negated,  nor  may  a  disjunction  be  conjoined  with 
another  formula.)   Hence,  proving  partial  correctness  is  in  many  cases 
formally  quite  simple;  it  is  not  dealt  with  in  this  paper. 

To  illustrate  the  difficulty  of  determining  if  and  why  a  system 

terminates  we  present  four  variations  on  System  (A) : 

The  first  variation  is 

-i-ia  -*■   a 

-i(oVB)  -*■  (-.-.-rfxA-me)  (B) 

-i(aA3)  ■+  (-i-i-rfxV -,-.-. B) 

aA(3Vy)  ■*  (aAB)V(aAy) 

(BVy)Aa  ■+  (BAa)V(yAa)  . 

Here  the  second  and  third  rules  have  been  modified  to  introduce  additional 

double  negations  (that  can  be  eliminated  by  the  first  rule) . 

The  next  variation  is  the  same  as  System  (B)  with  the  two  rules 

for  distribution  removed: 

1-ta.  -*■   a 

-i(aVg)  ■*■  (-1-.-laA-,-,-,3)  (C) 

-i(aA3)  -*■  (-i-i-.aV-i-i-.$)  . 


4 
This  system  pushes  negations  into  disjunctions  or  conjunctions  and 
eliminates  double  negations. 

The  third  variation  is 

-n°l  •*■   a 

-<(aV6)  ■»  ((n-l-,aA-.-.-.6)A(-maAnTr6)) 

-i(aAB)  +  ((-?-naV-m3)V(-1-,-1aV-,-ne))  (D) 

(aAa)  -*-  a 

(aVa)  +  a 

Here  the  second  and  third  rules  have  been  further  complicated  to  duplicate 

conjuncts  and  disjuncts.   To  compensate,  two  rules  for  their  elimination 

have  been  added. 

The  last  variation  is  the  same  as  System  (D) ,  except  that  the  extra 

negations  have  been  removed  from  the  second  and  third  rules: 

-i-,a  ■*  a 

-,(aV$)  +   ((naAn3)A(-|aA^e)) 

-,(aA3)  ■+  ((-taV-Ig)V(-,aVn3))  (E) 

(aAa)  -*■   a 

(aVa)  ■*■  a  . 

The  reader  is  invited  to  determine  which  of  these  five  systems  do 
terminate  and  which  do  not. 

In  the  next  section  we  define  what  we  mean  by  "simplification 
orderings"  and  show  how  they  may  be  used  to  prove  termination.*  In  Section 
III  we  define  "quasi-simplification  orderings"  and  extend  our  termination 
method  for  them.   Then,  in  Section  IV,  we  define  a  class  of  "recursive 
path  orderings"  and  show  that  they  are  simplification  orderings.   Finally, 
in  Section  V,  we  illustrate  the  use  of  these  orderings  in  termination  proofs 


*  This  extends  the  result  reported  in  Dershowitz  [1979]. 


II.   FIRST  TERMINATION  THEOREM 

Given  a  set  of  terms  T,  a  term- rewriting  system  P  over  T  is  a 
finite  set  of  rewrite  rules,  each  of  the  form  £.(a)  ->  r.(a),  where  the  a 
are  variables  ranging  over  T.   Such  a  rule  may  be  applied  to  a  term  t  e  T 
if  t  contains  a  subterm  of  the  form  of  the  left-hand  side  of  the  rule, 
i.e.  if  t  contains  a  subterm  £.(a)  with  the  terms  a  instantiating  the 
variables  a.   The  rule  is  applied  by  substituting  the  term  r.(a)  for 
the  subterm  I , (a)  in  t.   (The  variables  appearing  in  r.  must  be  a  subset 
of  those  in  £..)   The  choice  of  which  rule  to  apply  is  made  nondetermi- 
nistically  from  amongst  the  applicable  rules;  similarly,  the  choice  of 
subterm  to  apply  a  rule  to  is  nondeterministic.   We  write  t =*  t'  to 
indicate  that  the  term  t'  e  T  may  be  obtained  from  the  term  t  e  T  by  a 
single  application  of  some  rule  in  P. 

For  example,  the  one-rule  system 

(aAB)AY  ■*  aA(BAY)  (F) 

reparenthesizes  a  conjunction  by  associating  to  the  right.   Applying 
that  rule  twice  to  the  term  t  =  (aAb) A((cAd) Ae) ,  we  get 

t  =*  aA(bA((cAd)Ae))  =*  aA(bA(cA(dAe)) )  , 

or  alternatively, 

t  =*  (aAb)A(cA(dAe))  =*  aA(bA(cA(dAe) ) )  . 

In  either  case,  no  further  applications  of  the  rule  are  possible.  We  say 
that  a  term-rewriting  system  P  terminates  over  a  set  of  terms  T,  if  there 
exist  no  infinite  sequences  of  terms  t.  e  T  such  that  t^  : "  L2     '  t3  ~     ' '  '    ' 

We  will  need  the  following  concepts: 

A  partially-ordered  set  (S>)  consists  of  a  set  S  and  a 
transitive  and  irreflexive  binary  relation  >  defined  on  elements  of  S. 


(Asymmetry  of  a  partial  ordering  follows  from  transitivity  and 
irreflexivity.)  A  partially  ordered  set  is  said  to  be  totally  ordered 
if  for  any  two  distinct  elements  s  and  s'  of  S,  either  s  >  s'  or  s1  >  s. 
For  example,  both  the  set  Z  of  integers  and  the  set  N  of  natural 
numbers  are  totally  ordered  by  the  "greater-than"  relation  >.   The  set 
P(Z)    of  all  subsets  of  the  integers  is  partially  ordered  by  the  subset 
relation  C. 

A  set  S  is  said  to  be  well-founded  under  a  partial  ordering  >  if 
it  admits  no  infinite  descending  sequences  s.  >  s_  >  s  >  . . .  of  elements 
of  S.  Thus,  N  is  well-founded  under  >,  since  no  sequence  can  descend  beyond 
0,  but  Z  is  not,  since  -1  >  -2  >  -3  >  ...  is  an  infinite  descending  sequence. 

A  quasi-ordered  set  (S,fc)  consists  of  a  set  S  and  a  transitive 
and  reflexive  binary  relation  >   defined  on  elements  of  S.   For  example, 
the  set  Z  of  integers  is  quasi-ordered  under  the  relation  "greater  or 
congruent  modulo  10". 

The  following  theorem  (see  Manna  and  Ness  [1970],  also  Lankford 
[1975])  is  often  used  to  prove  the  termination  of  term-rewriting  systems: 

Theorem  (Manna  and  Ness  [1970]):   A  term-rewriting  system 
P  =  {1.    ->  r.}.  n  over  a  set  of  terms  T  terminates,  if  there 

x     1  1=1  ' 

exists  a  well-founded  ordering  >  over  T  with  the  property 
that 

t  >   t'  implies  f(...t...)  >>  f(...t'...)      (replacement) 

for  any  terms  t,t',f(...t...),f(...t'...)  e  T,  and  for  which 

I.   >  r  ,  i  =  l,...,p,  (reduction) 

for  any  assignment  of  terms  in  T  to  the  variables  of  JU„ 


The  reduction  condition  asserts  that  applying  any  rule  reduces  the  subterm 
to  which  the  rule  is  applied  in  the  well-founded  ordering.   The  replacement 
condition  guarantees  that  by  reducing  subterms  the  top-level  term  is  also 
reduced.   It  follows  that  t  =*  t'  implies  t  >  t'.   Since  by  nature  of  a 
well-founded  set  there  can  be  no  infinite  descending  sequences,  there  can 
also  be  no  infinite  sequence  of  rewrites. 

Our  method  for  proving  termination  is  based  on  the  following 
Definition:  A  transitive  and  irreflexive  relation  >•  (a  partial 
ordering)  is  a  simplification  ordering  for  a  set  of  terms  T 
if  it  possesses  the  following  three  properties: 

1)  t  V  t'  implies  f  (...t...)  >  f(...t'...),    (replacement) 

2)  f(...t...)  >  t,  (subterm) 

and  3)   f  (  .  .  .  t .  .  .  )  >  f  ( )  (deletion) 

for  any  terms  t,t',f(...t...),f(...t'...),f( )  £  T. 

By  the  subterm  property,  any  term  is  also  greater  than  any  of  the  (not 

necessarily  immediate)  subterms  contained  wathin  it.   The  deletion  condition  assert 

that  deleting  subterms  of  a  (variable  arity)  operator  reduces  the  term  in 

the  ordering;  if  the  operators  f  have  fixed  arity,  the  condition  is 

superfluous. 

The  following  theorem  gives  a  sufficient  criterion  for  proving 
that  a  term-rewriting  system  terminates  for  all  inputs. 

First  Termination  Theorem:   A  term-rewriting  system 

P  =  {£.  ->  r.}.  ,  over  a  set  of  terms  T  terminates  if  there 
l    i  i=l 

exists  a  simplification  ordering  >  over  T  such  that 

I.   >  r.,   i=l,...,p,  (reduction) 

for  any  assignment  of  terms  in  T  to  the  variables  of  £.. 


The  proof  of  this  theorem  is  based  on  the  following: 

Definition:  A  set  S  is  well-related  under  a  relation  R  if  every 

infinite  sequence  s_,s~,...  of  elements  of  S  contains  a  pair  of 

elements  s.  and  s , ,  i  <  1,  such  that  SjRs.. 
i      J  i  J 

Note  that  any  finite  set  is  well-related  under  any  reflexive  relation, 
while  no  (nonempty)  set  is  well-related  under  a  nonreflexive  relation. 
Note  also  that  a  set  S  is  well-related  under  a  relation  R,  if  and  only  if 
every  infinite  sequence  of  elements  of  S  contains  an  infinite  subsequence 
that  forms  a  chain  of  related  elements.   (Otherwise,  there  would  be  an 
infinite  number  of  maximal  length,  but  finite,  chains.  But  then  the  last 
elements  of  those  chains  would  also  contain  a  related  pair,  implying  that 
some  chain  was  not  maximal.) 

The  following  lemma  follows  from  the  definitions: 

Well-relation  Lemma:  A  set  S  is  well-founded  under  a  partial 
ordering  >,  if  and  only  if  it  is  well-related  under  its 
negation  y. 

Let  F  be  a  set  of  operators,  R  some  relation  defined  over  F,  and 

T(F)  the  set  of  all  terms  over  F.   [If  f  e  F  and  t  ,...,t   e  T(F),  where 

n  _>  0,  (for  f  of  unrestricted  arity) ,  then  f(t, ,...,t  )  e  T(F).l   The 

1      n 

relation  R  may  be  extended  to  a  homeomorphic  embedding  relation  <     on 
terms  in  T(F)  (viewing  terms  as  trees)  as  follows: 

s  =  f (sn ,s  ,. .. ,s  )  <     g(t  ,t  ,...,t  )  =  t  , 
l  z      m  — k.    ±  z.  n 


if  and  only  if 

(a)  fRg  and  for  all  i,  1  <_  i  <_  m,  we  have  s .  <     t .    , 

where  l<j-<j,<...  <j   <n 

—  1    L  m  — 

or 

(b)  s  o  t.  for  some  j  ,  1  <  j  <  n. 

— R  j  — 

We  shall  use  the  unsubscripted  <   to  denote  the  extension  of  the  equality 
relation. 

We  shall  need  the  following  lemma  and  theorem: 

Embedding  Lemma:   Let  s  and  t  be  terms  in  T.   If  s  <_  t ,  then 

s  <  t  in  any  simplification  ordering  >  over  T. 
As  usual,  s  ^t  means  t  ^  s  or  t  =  s. 

Proof:   The  proof  is  by  induction  on  the  size  (number  of  occurrences 
of  operators)  of  t.   Assume  that  s'  _<j  t'  implies  s'  <  t1  for  any  s'  and  for  any 

t'  smaller  than  t.   By  the  definition  of  <t,  if  s  =  f(s,,...,s  )  <J  g(t,,...,t  )  =  t 

j  __>         v  1'    '  m  —  °   1    '  n 

(m  or  n  may  be  zero),  then  either  (a)  f  =  g  and  s.  <  t.   for  all  i, 

Ji 
1  _<  i  _<  m,  in  which  case  s.  ^  t.   by  the  induction  hypothesis  and  therefore 

-"i 
s^f(t.  ,...,t.  )  ^  t  by  the  replacement  and  deletion  properties;  or  else 

Jl      Jm 
(b)  s  _£  t .  for  some  j  ,  1  <^  j  <^  n,  in  which  case  s<t.  <g(...t....)  =  t 

by  the  induction  hypothesis  and  the  subterm  property.  D 

Tree  Theorem  (Kruskal  [I960]):   A  set  F  of  operators  is  well- 
related  under  a  quasi-ordering  ^,  if  and  only  if  the  set  of 
terms  T(F)  is  well-related  under  the  embedding  relation  <  .. 

A  simple  proof  may  be  found  in  Nash-Williams  [1963] . 
We  are  ready  now  for  the 
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Proof  of  First  Termination  Theorem:   If  P  does  not  terminate,  then  by 

definition  there  exists  an  infinite  sequence  of  terms  t.  °*  t_  "*■  ...  . 

Note  that  there  can  only  be  a  finite  number  of  Operators  appearing 

in  the  sequence  (those  in  t1  and  in  P)  and  they  are  well-related  under 

equality.  Thus,  by  the  Tree  Theorem  t.  <_   t.  for  some  i  <  j,  and  by  the 

Embedding  Lemma  t .  ^  t .  in  the  given  simplification  ordering  >.  On  the 

other  hand,  if  I.   >  r.,  then  it  follows  by  the  replacement  property  that 

t-  >  t_  >  . . .  and  by  transitivity  that  t .  >  t .  for  all  i  <  j .   This 
12  y  1    j 

contradicts  the  aayuHWtcy  of  >. 

Note  that  the  definition  of  a  simplification  ordering  does  not 

require  that  >   be  well-founded,  e.g.  the  set  N  is  not  well-founded  under 

the  simplification  ordering  <•   The  subterm  condition,  however,  is  a 
necessary  condition  for  any  total  ordering  >  on  T(F)  with  the  replacement 

property  to  be  well-founded.   (Were  t  >  f(...t...)  for  some  terms  t  and 

f(...t...),  then  we  would  have  an  infinite  descending  sequence  of  terms 

t  >  f(...t...)  V  f(...f(...t. ..)...)  >  ...  .)   The  following  theorem 

provides  a  sufficient  condition  for  well-foundedness: 

Well-foundedness  Theorem:   Given  a  simplification  ordering  > 
over  T(F)  such  that 

f  >  g  implies  f(tr...,tn)  >  g(tl tn)    ^cement) 

for  any  operators  f,  g  e  F  and  terms  t,,...,t  e  T(F), 
T(F)  is  well-founded  under  >,  if  F  is  well-related  under  <. 

Proof:   If  F  is  well-related  under  <f  then  T(F)  is  well-related 
under  <^   (Tree  Theorem) .   It  is  easy  to  see  (along  the  lines  of  the 
Embedding  Lemma)  that  s  <     t   implies  s  <   t.   Thus,  T(F)  is  well-related 
under  •<   and  is  therefore  (Well-relation  Lemma)  well-founded  under  >. 
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Note  that  by  the  Well-relation  Lemma,  for  a  total  ordering  >  on  F,  F  is 
well-related  under  <,  if  and  only  if  F  is  well-founded  under  >. 
Thus,  for  a  total  simplification  ordering  >  satisfying  the  operator  replace- 
ment condition,  T(F)  is  well-founded  under  >  if  F  is. 
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III.   THE  SECOND  TERMINATION  THEOREM 

Given  a  partial  ordering  >  on  a  set  S,  it  may  be  extended  to  a 
partial  ordering  »  on  finite  multisets  of  elements  of  S,  wherein  a 
multiset  is  reduced  by  removing  one  or  more  elements  and  replacing  them 
with  any  finite  number  of  elements,  each  of  which  is  smaller  than  one  of 
the  elements  removed.   For  example,  if  >  is  the  "greater  than"  ordering 
on  the  natural  numbers,  then  {3,3,4,0}  »  {3,2,2,1,1,1,4}  in  the  multiset 
ordering,  since  an  occurrence  of  3  has  been  replaced  by  five  smaller 
numbers  and  in  addition  an  occurrence  of  0  has  been  removed  (i.e.  replaced 
by  zero  elements).   Such  a  multiset  ordering  >^  is  well-founded,  if  and 
only  if  S  is  well-founded  under  >.   (See  Dershowitz  and  Manna  [1979].) 

Given  a  quasi-ordering  >  on  a  set  S,  define  the  equivalence  relation 
as  both  V  and  ^,  and  the  partial  ordering  >  as  V  but  not  r*.   The  multiset 
ordering  >^  may  then  be  defined  as  follows:   A  multiset  is  reduced  by 
removing  one  or  more  elements  and  replacing  them  with  any  finite  number 
of  smaller  elements  (with  respect  to  » ;  at  the  same  time  any  number  of 
other  elements  may  be  replaced  with  equivalent  ones  (with  respect  to  ~). 

Analogous  to  the  definition  of  a  simplification  ordering,  we  have  the 

Definition:   A  transitive  and  reflexive  relation  V  (a  quasi- 
ordering)  is  a  quasi-simplification  ordering  for  a  set  of 
terms  T  if  it  possesses  the  following  three  properties: 

1)  t  V  t*  implies  f(...t...)  >  f(...t'...),    (replacement) 

2)  f(...t...)  V  t,  (subterm) 

and  3)   f  (.  . .  t.  . .  )  V  f  ( )  (deletion) 

for  any  terms  t,t',f(...t...),f(...t'...),f( )  e  T. 
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The  Embedding  Lemma  also  holds  for  quasi-simpllf Ication  orderings,  i.e. 

s  <   t  implies  s  ^  t. 

We  have  a 

P 
Second  Termination  Theorem:   A  term-rewriting  system  P  =  {£..->-  r. } .  . 
°  i    1  i=l 

over  a  set  of  terms  T  terminates  if  there  exists  a  quasi-simplif ication 
ordering  >  such  that 

£.  >  r.  ,    i  =  1 p  ,  (reduction) 

for  any  assignment  of  terms  in  T  to  the  variables  of  £.. 

Proof:   Let  S  (t)  denote  the  multiset  of  all  the  (various 
level)  sub  terms  in  the  term  t,  i.e. 

s*(f(t1,...,t  ))  =  {f(t.,...,t  )}  u  s*(t.)  u  ...  u  s*(t  )  , 

In         in         i  n 

where  U  denotes  union  of  multisets.   Define  an  ordering  >'  on  T  as 
follows:   s  >'  t  if  and  only  if  S  (s)  W  S  (t)  in  the  extension  V>  of  the 
quasi-ordering  >  to  multisets. 

We  first  show  that  X  is  a  simplification  ordering:   1)  For  the 
replacement  condition  we  must  show  that  if  S  (t)  ^  S  (t')  then  S  (f (. . . t . . . ))  >^ 
S*(f(...t\..)),  i.e.  {f(...t...)}  U  ...  U  S*(t)  U  ...  >^  {f(...t'...)}U  ...U 
S  (t ' )  U  . . .  .   We  are  given  that  f(...t...)^f(...t'...)  and  the 

rest  follows  from  the  definition  of  the  multiset  ordering.   2)  The  subterm 

*  v   * 

condition  S  (f(...t...))  >>  S  (t)  follows  directly  from  the  definitions. 

■k  ft 

3)  The  deletion  condition  S  (f(...t...))  »  S  (f(...  ...))  follows  from 

the  given  property  f(...t...)J^f( )  and  the  definition  of  ». 

To  apply  the  First  Termination  Theorem  we  must  show  that 

1.   >'  r.,  i.e.  S  (£.)  »  S  (r.),  given  that  I.   >   r..   But  if  I.   >   r . ,  then 
ii  l         i  li  li 
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by  the  subterm  property  of  quasi-simplification  orderings,  I  is  also 
greater  than  any  subterm  of  r..  Thus,  S  (£  )  »  S  (r  )  and  the  result 
follows.  n 
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IV.   THE  RECURSIVE  PATH  ORDERING 

In  this  section,  we  give  a  recursive  definition  of  an  ordering  on 
terms  and  show  that  it  is  a  simplification  ordering  and  also  that  (under 
suitable  conditions)  it  is  well-founded. 

We  begin  with  the 

Definition:   Let  >  be  a  partial  ordering  on  a  set  of  operators 
F.   The  recursive  path  ordering  >  over  the  set  T(F)  of  terms 
over  F  is  defined  recursively  as  follows: 

s  =  f(s1,...,sm)  >   gCt^...,^)  =  t  , 

if  and  only  if 

f  =  g  and  {s1,.  .  .  ,sm>  »   {^.....t  }f 
f  >  g  and  {s}  »*  {tl5...,tn}, 


or 


or   f  y  g  and  {sl5...,s  }  »   {t}, 
—         1      m  — 

w*  i  *  * 

where  »   is  the  extension  of  >  to  multisets  and  >^_  means 

* 
)*   or  =. 


We  shall  consider  two  terms  to  be  equal  if  they  are  the  same  except  for 
permutations  of  subterms.   This  definition  is  similar  to  a  characterization 
of  the  "path  of  subterms"  ordering  given  in  Plaisted  [Sept.  1978]. 

For  example,  representing  terms  as  trees,  we  have 


2 

l 

s    = 

/     \ 

V* 

/  \ 

3            1 

2            2 

1          /\ 

/\       /\ 

0        0        3 

3        0  3        3 

=  t 


0   o 
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in  the  recursive  path  ordering  over  T(N)  with  the  operators  ordered  by  >: 

By  the  definition  of  >  ,  to  compare  two  terms  with  the  same  outermost 

operator,  in  our  case  3,  we  must  compare  (the  multisets  of)  their  subterms,  viz, 

2  1 

/  \  /  \ 

3     1         and      2     2 

I    /  \  /\   /\ 

0   0   3  3   0  3   3. 

I  ill 

0  0     0   0 


Since  2  >  1,  for  the  former  to  be  greater  than  the  latter  we  must  have 

2  2  2 

/  \         *       /  \         /  \ 

3     1       >       3    0,33 

I    /  \  I  II 

0   0   3  0  0    0. 

I 
0 

Since  2  =  2,  we  must  now  compare 


with    |  |   ,   0  >    and 


('    '   '} 

Lo        oj 


*  i 

in  the  multiset  ordering  »  .   Finally  since   /  \   is  greater  than 

0   3 


3 


both  0  and    ,  we  indeed  have  s  >  t. 
0 


We  have  the 


Theorem:  The  recursive  path  ordering  >  is  a  simplification 
ordering. 
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it 

Proof:   We  must  show  that  the  relation  ^  is  irreflexive  and 

transitive  and  that  it  satisfies  the  replacement,  subterm,  and  deletion 
conditions  of  simplification  orderings. 

Irreflexivity :   We  wish  to  prove  that  t  %      t  for  any  term  t.   The 
proof  is  by  induction  on  the  size  (number  of  operators)  of  t.   If  t  is  of  the 

it 

form  f(t..,...,t  ),  then  by  the  inductive  hypothesis,  the  relation  ^  is 
irreflexive  for  the  subterms  t..   It  follows  from  the  definition  of  the 

I    it 

multiset  ordering  that  {t.  ,...,t  }  )F>      {t,  ,...,t  }.   Thus,  by  the 

1      n  '      1      n 

■k 

definition  of  the  recursive  path  ordering,  f(tn,...,t  )  )L     f(t_,...,t  ). 

In        ±      n 

Subterm:   We  show  instead  that  if  s  V  t  for  two  terms  s  and  t, 

>V  it 

then  (a)  s  >  t.  for  any  subterm  t.  of  t  and  (b)  f(...s...)  V   t  for  any 

it 

superterm  f(...s...)  of  s.   Since  s  >  s,  it  follows  from  (b)  that 

it 

f(...s...)  >•  s,  as  desired. 


Let  g  and  h  be  the  outermost  operators  of  s  and  t,  respectively.   We 
prove  (a)  and  (b)  simultaneously  by  induction  on  the  (combined)  size  of  s  and  t 

For  (a)  s  ^  t  ,  consider  three  cases: 

*        *  * 

1)  g  =  h.   By  the  definition  of  >  ,  if  s  >■  t  then  s.  >  t. 

—  i  —   j 

for  some  subterm  s.  of  s,  and  by  the  inductive  hypothesis  (b) 

* 
it  follows  that  s  >  t  . 

J 

2)  g  >  h.   In  this  case,  it  follows  directly  from  the 

*         * 

definition  of  >»  that  s  >  t.. 

J 

3)  g  >  h.   From  the  definition  of  >  ,  we  have  s.  >  t  for  some 

l  — 

subterm  s±   of  s.   By  the  inductive  hypothesis  (a),  s.  >*  t., 

it 

and  by  hypothesis  (b)  ,  we  get  s  >>  t  . 

j 
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it 
For  (b)  f(...s...)  y     t  we  again  consider  three  cases: 

ft 

1)  f  =  h.  We  already  know  (a)  that  s  >-  t.  for  any  subterm 

t.  of  t.   Thus,  by  the  definition  of  the  multiset  ordering, 

*  ft 

{ . . . s . . . }  ^   { . . . t . . . . }  and  by  the  definition  of  V  , 

J 

f(...s...)  >*  t. 

ft 

2)  f  >  h.   Since  s  >  t . ,  it  follows  from  the  inductive 

ft 

hypothesis  (b)  that  f(...s...)>  t.,  and  therefore 
{f(...s...)>  ^   {...t....}  iti  the  multiset  ordering. 
Thus,  by  the  definition  of  >  ,  f(...s...)  >  t. 

ft 

3)  f  ¥   h.  We  are  given  that  s  >  t.   It  follows  from  the 
definition  of  the  multiset  ordering  that  {...s...}  >^  {t} 

*  ft 

and  from  the  definition  of  >  that  f(...s.. .)  >•  t. 

Transitivity:   We  must  show  that  s  ^  t  and  t  >■  u  together 

*  *  * 

imply  s  >•  u.   Note  that  by  the  subterm  condition,  s  >  t.  and  t  >  u, 

for  any  subterms  t.  of  t  and  u,  of  u.   Let  f,  g,  and  h  be  the  outermost 
operators  of  s,  t,  and  u,  respectively.   The  proof  is  by  induction  on  the 

size  of  s,  t,  and  u  and  considers  five  cases: 

ft 

1)  g  y   h.   We  are  given  that  sV   t.  for  any  subterm  t.  of  t, 

J  J 

V*  »* 

while  by  the  definition  of  t  >  u,  we  have  t.  >  u  for 

*     *  * 

some  t..   Thus,  s  >  t.  >  u,  and  s  >  u  follows  from  the 

induction  hypothesis  ,  since  t.  is  smaller  than  t. 

ft 

2)  f  >  h.   By  the  definition  of  s  V  u,  we  must  show  that 

* 

s  >  u,  for  all  subterms  u,  of  u.   But  we  are  given  that 

s  >  t  >  u,  and  the  result  follows  by  the  induction 
hypothesis  ,  since  u  is  smaller  than  u. 
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3)  f  ^  g,  h.   We  are  given  that  s.  V  t  ^  u  for  some  subterm 

s.  of  s.   By  the  induction  hypothesis,  s.  V  u,  since  s, 

*     * 

is  smaller  than  s,  and  by  the  definition  of  >  ,  s  >  u. 

4)  f  =  h  /h_   g.   We  must  show  that  {  . .  .s. . . .  }  ^      { . . .u  .  .  .  } 

and  are  given  that  s.  >   t  >  u,  for  some  s.  and  for  all  u,  . 

X  K.  X  rC 

The  result  follows  by  the  induction  hypothesis. 

5)  f  =  g  =  h.   We  must  show  that  {  .  .  .s  .  .  .  .  }  >•>•   {. .  .u,  . . .  }  and 
are  given  that  {...s. ...}  W   {  .  . . t .  .  . .  }_>^   {...u  . ..}. 

1  J  K 

v  *      v  *  \* 

By  the  induction  hypothesis,  s.  >  t.  >  u   implies  s.  >  u, 

X  K.  X       K. 

for  all  s.,  t.,  and  u,  ,  and  since  the  extension  of  a 
transitive  relation  to  multisets  is  also  transitive,  it 

follows  that  {...s....}  »   {...u,  ...}. 

l  k 

Since  these  five  cases  cover  all  possible  relations  between 
f,  g,  and  h,  our  proof  of  transitivity  is  complete. 


Replacement:   By  the  definition  of  a  multiset  ordering, 

JL,  JL 

{...s...}>V   {...s1...}  if  s  V   s'.   Thus ,  by  the  definition  of  the 
recursive  path  ordering,  f(...s...)  V  f(...s'...). 


Deletion:   By  the  definition  of  a  multiset  ordering, 

■k 

{ . . .s. . .}  y>      { }.   Thus,  by  the  definition  of  the  recursive  path 

JL 

ordering,  f  (. .  .s. . .)  V  f  ( ).  D 


Since  the  recursive  path  ordering  is  a  simplification  ordering, 
it  may  be  used  in  conjunction  with  the  First  Termination  Theorem 
to  prove  the  termination  of  term-rewriting  systems.   It  turns  out  that 

•k 

when  >  is  a  total  ordering,  the  recursive  path  ordering  >■  is  in  effect 
the  same  as  the  "path  of  subterms"  ordering  defined  in  Plaisted  [Sept.  19  78] 
in  a  more  complex  manner.   His  proof  of  well-foundedness  is  considerably 
longer  than  our  proof  below. 
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Finally,   we  prove   the 

JL 

Theorem:   The  recursive  path  ordering  ^  on  the  set  of  terms 
T(F)  is  well-founded,  if  and  only  if  the  ordering  >  on  the 
set  of  operators  F  is  well-founded. 

Note  that  if  >  is  a  total  ordering  on  F,  then  >  is  a  total  ordering  on 

T(F),  in  which  case  this  theorem  follows  as  a  corollary  of  the  Well-foundedness 

Theorem. 

Proof:   The  "only-if"  direction  follows  trivially  from  the  fact 
that  for  f,  g  e   F,  f  >•  g  implies  f  >  g. 

The  proof  of  the  "if"  direction  is  similar  to  Nash-Williams'  [1963] 
proof  of  the  Tree  Theorem.   Assume  that  ^  is  well-founded  and  that  the 
theorem  is  false.   Then  there  must  exist  an  infinite  descending  sequence 
of  terms  t..  ^   t~  V   t„  >•   ....   Construct  a  "minimal"  descending  sequence 


in 


the  following  manner:   if  the  terms  t..  >   t~  V   ...  ^   t.  _,  i  _>  1, 


have  already  been  chosen,  then  let  t.  be  a  minimal  size  i-th  term  from 

among  those  infinite  descending  sequences  beginning  with  the  terms  already 

chosen. 

Let  op(t)  denote  the  outermost  operator  of  a  term  t  and  let  S(t) 

be  the  multiset  of  immediate  subterms  of  t,  i.e.  op(f (t, , . . . ,t  ))  =  f  and 

S(f(t.,...,t  ))  =  {t. ,...,t  }. 
in       In 

We  first  show  that  for  all  i,  op(t.)  >  op(t  .,-,)•   For  assume 

contrariwise  that  for  some  i,  op(t.)  ^  op(t  .,-•)•   Then  by  the  definition 

of  t.  >  t.in,  ti   >   t . , ,  for  some  subterm  t.  of  t..   But  then  by  the 
i     i+I   i  —   l+l  li 
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*  v  A     v  «  .j  v  *  t.  ^  *-     and 

subterm  property  of  >  ,  we  have  t±mm±  >     t±  >     t±   >  c±+1  r   t±+2 

.  *    v  *     v  *      S*  i-J  V*  t    V*  . . .  would  be  a  smaller  descending 
Cl    C2  >      "  i-1     i     i+2 

sequence  than  the  minimal  one. 

Since  we  are  given  that  >  is  well-founded,  there  must  therefore  be 
an  infinite  descending  sequence  t  >  t£+1  >      . . . ,  all  elements  of  which 
have  the  same  outermost  operator.  Thus  by  the  definition  of  >*  we  must 
have  an  infinite  descending  sequence  of  multisets  of  subterms 
S(t  )  »*  S(t   )  >>>•*  ....   On  the  other  hand,  by  the  assumption  of 

Jfc  *  oo 

minimality  the  set  S  =  U  S(t.)  is  well-founded.   (Otherwise,  there  would 

i-1  *     * 

exist  an  infinite  descending  sequence  s1  V  s2  >   ...  of  elements  of  S. 

Since  s   e  S(tk>  for  some  k,  the  sequence  t±   >  t2  >      ...  >  tk-1  > 
s  >*  s  >*  ...  would  be  smaller  than  the  minimal  one.)  But  if  S  is  well- 
founded,  then  multisets  of  elements  of  S  are  also  well-founded.   Contradiction.   a 

The  "multiset"  and  "nested  multiset"  orderings  in  Dershowitz 
and  Manna  [19  79]  and  the  "simple  path"  ordering  in  Plaisted  [July  19  78] 
are  special  cases  of  this  recursive  path  ordering;  their  well-foundedness 
follows  as  a  corollary  of  this  theorem.   The  ("linear")  ordering  in  Knuth 
and  Bendix  [1969]  and  the  "polynomial"  ordering  in  Lankford  [19  79]  are 
other  examples  of  simplification  orderings. 
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V.   EXAMPLES 

We  return,  in  this  section,  to  the  six  examples  (A-F) 
of  term-rewriting  systems  that  have  been  presented  in  the  previous  sections, 

(A)   Our  first  example  was  the  following  system  for  computing 
the  disjunctive  normal  form  of  a  logical  formula: 

-i-ia  ->  a 

-i(aVB)  -*  (-iaAnB) 
-i(«A|3)  >   (iaV-,3) 
aA(BVy)  ->  (aAB)V(aAy) 
(3Vy)Aa  -*  (BAa)V(yAa) 

To  prove  that  this  system  terminates  for  all  inputs,  let  the 
operators  -,,  A,  and  V  be  ordered  by  -,  >  A  V  V,  and  order  terms  according 
to  the  recursive  path  ordering  >  .   Since  this  is  a  simplification  order- 
ing on  terms,  by  the  First  Termination  Theorem,  we  need  only  show  that 

-i-ia  >   a  , 

-,(aV3)  >*  (naA-,3), 

-i(aAe)  >   (-.aV-,3), 

aA(3Vy)  >      (aA3)V(aAy),  and 

(3Vy)Aa  >      (3Aa)V(yAa) , 

for  any  terms  a,  3,  and  y. 

The  first  inequality  follows  from  the  subterm  condition  of 
simplification  orderings.   By  the  definition  of  the  recursive  path  order- 

ing5  to  show  that  -|(aV3)  ^   (naA-i3)  when  ->>A,  we  must  show  that 

*  * 

i(aV3)  >  ia,  and  n(aV3)  >  i3.   Now,  since  the  outermost  operators  of 


23 

-|(aVB),  -ia,  and  -|3  are  the  same,  we  must  show  that  ctVBV  a  and  aV$V  B. 
But  this  is  true  by  the  subterm  condition.   Thus  the  second  inequality 
holds.   By  an  analogous  argument,  the  third  inequality  also  holds. 

For  the  fourth  inequality,  we  must  show  ctA(3Vy)>  (aAB)V(aAy). 
Since  A>V,  we  must  show  aA(6Vy)^  aAB  and  aA(3Vy)>  aAy.   By  the  definition 
of  the  recursive  path  ordering  for  the  case  when  two  terms  have  the  same 
outermost  operator,  we  must  show  that  {a,BVy}W  (a, 8}  and  {a,BVy}^  {a,y}. 
These  two  inequalities  between  multisets  hold,  since  the  element  BVy 
is  greater  than  both  3  and  Y  with  which  it  is  replaced.   Thus  the  fourth 
inequality  holds.   Similarly  the  fifth  inequality  may  be  shown  to  hold. 

Therefore,  by  the  First  Termination  Theorem,  this  system  terminates  for 
all  inputs.  □ 

(B)  The  variation 

-i-ia  ■+•  a 

-i(aVB)  -*■  (rnaA-mB) 

-i(aAB)  ■*  (nnnaVn-i-iB) 
aA(BVy)  ■*  (aAB)V(aAy) 
(BVy)Aa  ■+  (BAa)V(yAa) 

of  System  (A)  does  not  in  fact  terminate  for  all  inputs,  though  whenever  it 

does  terminate,  the  resulting  expression  is  in  disjunctive  normal  form. 

To  see  that  it  does  not  terminate,  consider  the  following  derivation: 

n-i(aA(aVa))  ■*  -,-,( (aAa)V(aAa)) 

^-|(n-ii(aAa)Ann-i(aAa))  =*...=>  -,(-,  (aAa)  A-i(aAa)  ) 

=*...=*  n((-rnaV-rna)A(-rriaV-n-ia))  =*...=>  -i(  (naV-,a)A(-,aVna)) 

=>  n  (  haA  (naVna) )  V  (naA  (naVna) ) ) 

"*  (n-n(naA(naV-,a))A-,T,(naA(naVTa)))=>  ...   . 

Thus,  beginning  with  a  term  of  the  form  -|-|(aA(aVa))  ,  a  term  containing  a 

subterm  of  the  same  form  is  derived,  and  the  process  may  continue  ad  infinitum.   D 


24 


(C)   Our  third  example  was 

-na  -*■  a 

-,(aV3)  ■>  (innaA-i-i-iB) 

-i(aAB)  ->  (-n-,aVn-i-.8)   . 

We  cannot  use  the  recursive  path  ordering  to  prove  the  termination  of 
this  system.   Instead,  we  use  the  Second  Termination  Theorem  and  define  the 
following  quasi-simplif ication  ordering: 

t  >  t' 

for  two  terms  t  and  t',  if  and  only  if 

[t]  >  [tT]  and 

{[a]  :  -ja  appears  in  t}  »  {[a]  :  ^a  appears  in  t'}, 
where  [a]  denotes  the  number  of  operators  other  than  -|  in  a,  and  >>_  means  either 
»  in  the  multiset  extension  of  the  ordering  >  on  numbers,  or  else  =. 

It  is  easy  to  see  that  this  quasi-ordering  satisfies  the  replacement 
and  subterm  properties  of  quasi-simplif ication  orderings  on  fixed-arity  terms. 
It  remains  to  show  that  each  rule  reduces  the  subterm  it  is  applied  to  under 
the  ordering  >  .   Note  that  the  number  of  operators  other  than  -j  is  the  same  for 

both  sides  of  each  rule.   To  see  that 


-na  >   a  , 

note  that  there  are  two  less  elements  in  the  multiset  of  numbers  of  operators 
for  the  right-hand  side  than  for  the  left-hand  side.   To  see  that 

n(aV3)  V  (-maA-mB) 
and  -,(aAg)  >  (-maV-mB)  , 

note  that  the  number  of  operators  other  than  -|  in  aV3  and  aAB  is  greater  than 
that  of  -na,  -,a,  tt3,  and-iB.   Thus  the  multisets  corresponding  to  the  left-hand 
sides  are  strictly  greater  than  those  for  the  right-hand  sides.  C3 

(D)  The  system 

-na  ->  a 

-l(aV3)  ■*  ((-nnaAiniB)A(nn-iaA-,-n3)) 

-,(aAB)  ■*  ((-n-^V-1-,-,5)v(-m3V-n-13)) 

(aAa)  -»■  a 
(aVa)  ->  a 
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however,  does  not  terminate.   The  following  derivation  demonstrates  this: 

-n(aAa)  =>  -,( (-l-,-,aV-n-,a)V(-n-iaV-ri-,a) )  =*...=> 
-,((-iaV-,a)V(-,aV-,a))  => 

((-ini(-|aV-,a)A-1-,-,(-,aV-1a))A(-n-,(-laV-,a)  Ann-i(-iaV-ia)))^  .  .  .=> 
m-i(naVna)  =*...=»  -rrnC-naA-na)  =>,...  D 

(E)  The  proof  of  the  termination  of  the  system 

-i-ia  ■+  a 

-i(avg)  ->  ((naA-,3)A(-raAnS)) 

-i(aA6)  ->  ((-1aV-,e)V(-laV-,6)) 

(aAa)  ■*■  a 
(aVa)  -»■  a  . 

is  similar  to  that  of  System  (A) .   We  use  the  recursive  path  ordering  with  the 

operators  partially  ordered  by  -|VA  and  -JVV  . 

We  have 

it 

-n<*  >   a  , 

■k 

(a^a)  >  a , 

•k 

and  (aVa)  >  a  , 
by  the  subterm  condition;  we  have 

n(aVB)  >*  ((-ictA-16)A(-1aA-,B)) 
and  -i(aAB)   >*  ( (nav-1B)V(-,aV-,B))  , 

since  -\   is  greater  than  both  A  and  V,  and  the  subterms  aVg  and  aA3  are  greater 

than  either  a  or  3   by  the  subterm  condition. 

Using  the  recursive  path  ordering  to  prove  the  termination  of 
systems  in  this  manner,  generalizes  the  conditions  for  termination  in 
Itturiaga  [1967].   The  cases  where  Itturiaga's  method  works  are  those 
for  which  the  operators  are  partially  ordered  so  that  the  outermost 
("virtual")  operators  of  the  left-hand  side  of  the  rules  are  greater 
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than  any  other  ("complementary")  operators  on  the  left-hand  side,  which 

in  turn  are  greater  than  anv  other  operators.  o 

(F)   To  prove  the  termination  of  the  one-rule  system 

(aAg)Ay  ■+  aA(gAy)  , 

we  again  use  the  Second  Termination  Theorem. 
We  define  the  quasi-ordering 

if  and  only  if 

|t|  >  |f  | 

or  else  (t  and  t'  are  conjunctions  and) 

1 1|  =  1 1'  |   and   1 1  |  _>  1 1'  |  , 

where  |a|  denotes  the  total  number  of  operators  in  a  and  t   and  t'  are 
the  left  conjuncts  of  t  and  t',  respectively. 

To  see  that  this  is  a  quasi-simplif ication  ordering,  note  that 
tVt'  implies  j  1 1  _>_  j  t "  |  .   Replacing  a  right  conjunct  t_  with  a  smaller 
or  equivalent  one  (under  ^)  can  only  decrease  the  total  size  of  a  conjunction 
t  =  t-|At2  an<*  cannot  change  the  size  of  t-,;  replacing  t,  with  a  smaller  or 
equivalent  left  conjunct  cannot  increase  the  size  of  t  or  t  .   The  subterm 
condition  t^t^t^t^  obviously  holds  since  1 1..  At  |  >  1 1  |  ,  1 1?  |  . 

It  remains  to  show  that 

(aAB)Ay  >  aA(gAy)    . 
But    |  (aAB)Ay  |  =  |aA(3Ay)  |,  while  |  otA3  j  >  j  ot  |  ,    and   the   proof   is    complete. 
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This  example  illustrates  how  the  conditions  for  termination 
required  by  the  methods  of  Knuth  and  Bendix  [1969]  and  Lankford  [1979]  may 
be  relaxed:   Given  a  quasi-ordering  V  on  (fixed  arity)  operators  and  a 
quasi-simplif ication  ordering  >   on  terms,  such  that 

f (. . .t. . ,)!  t  implies  f  unary  and 

f^F8  for  all  operators  g, 
we  define  the  quasi-simplif ication  ordering 

s  =  f(s  ,...,s  )  V  g(t  , ...,t  )  =  t  , 
1      m       In 

if  and  only  if 

(s,f ,s  , . . .  ,s  )  V  (t,g,t  ,. . . ,t  )  , 
1      m         In 

where  the  two  tuples  are  compared  lexicographically,  first  according  to 
the  terms  s  V  t,  then  according  to  the  operators  f  ^g,  and  finally 
according  to  the  subterms  s.  >_t..   To  prove  termination,  one  must  find 
appropriate  quasi-orderings  >  and  >   for  which  H.Vr,  for  all  rules 

~  r        "1  1     i 

i  . -*■  v .    in  the  given  system.  D 
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